Headers:
From: {noreplay@faxandvoice.com}
Subject: eFax message from "unknown" - 1 page(s), Caller-ID: 1-314-427-3300
Message body:
Attached is a Zip file:
Inside the Zip is a Windows Executable:
FAX_20150302_1425293884_127.zip
FAX_20150302_1425293884_127.exe
Sha256 Hashes:
3827daf038168f40042c25579fd44a05d1c799fe9e9fb2b159bcb066dff798d1 [1]
Malware Information:
Description:
VirusTotal Report [1] (hits 4/57 Virus Scanners)
Malwr Report [1]
Hybrid Analysis Report [1]
The malware in the zip is
Dyre, is Zeus-like banking Trojan, which is trying to capture as much information about your online banking details as possible.
It's also being used to then send out the same malware to everyone else by using your own copy of outlook and your bandwidth.
Cheers,
Steve
Sanesecurity.com
2 comments:
Thanks. Got this. I knew it was junk.
My email server wiped it out, saying it was infected.
Post a Comment